[gpderetta]

There are .so interposition tricks that can be used for that.

I think Pth used to do that for example.

[yosefk]

Could you elaborate?

[gpderetta]

For example: https://www.gnu.org/software/pth/pth-manual.html#system_call...

See the hard system call wrapping. This is just one option.